$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9c674793-2377-4f72-bcf8-2ff0d70f9566.roa File: 9c674793-2377-4f72-bcf8-2ff0d70f9566.roa (raw, json) Hash identifier: 8u6/Sg9wC9p/KaHWTp6dM45BxPv+BMeivwkhmtZaASo= Subject key identifier: BA:F4:F4:76:C1:D7:6D:F8:C5:17:2C:9D:E7:E2:B7:33:FD:24:AD:93 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5D95460229E95C96E54C4966563822F60BB3E10C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9c674793-2377-4f72-bcf8-2ff0d70f9566.roa Signing time: Thu 05 Jun 2025 14:39:05 +0000 ROA not before: Thu 05 Jun 2025 14:39:05 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:46:02:29:e9:5c:96:e5:4c:49:66:56:38:22:f6:0b:b3:e1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:39:05 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=5698561aa3bb329f65ec0d69e2261d69d9fa16e809912f22562b56f6d70676a2, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:d1:8c:f3:4e:83:94:79:cd:33:08:af:c6: 5e:e3:85:06:f3:35:0b:59:35:c3:d0:9c:37:0d:b6: 7e:b6:db:47:6f:60:54:2a:39:ef:7c:1a:4c:d7:1f: 68:9c:97:47:e1:fc:17:d5:19:ed:6c:71:b4:12:38: 2e:25:79:d0:98:e4:be:d6:4b:a2:12:ca:a6:55:36: e8:ad:dd:3e:69:4b:fb:e3:b6:37:ac:d4:15:ee:a9: c2:c3:3e:8a:4c:bb:66:14:53:fd:14:43:28:ae:73: 94:95:8d:23:27:ec:81:85:19:85:08:37:8a:b5:dc: d4:1f:51:58:ad:1e:52:49:e9:52:23:c1:13:9b:cf: 6b:5b:b6:c7:fa:26:a5:5d:07:31:c2:43:9d:13:b3: f7:64:35:e0:b9:8e:5b:89:4c:50:9d:87:35:66:b9: ab:b6:27:24:c8:86:71:64:0f:38:fc:a2:f1:72:af: 4c:8f:98:9c:e5:7d:51:4a:de:3a:73:57:cd:d7:91: 56:64:22:73:c8:9b:93:79:31:3d:91:8c:30:98:7e: 3a:17:4f:de:d7:80:05:9d:2a:67:6d:7b:67:cc:42: f3:ab:04:f9:76:27:b9:a3:cf:d7:13:1e:b0:f4:58: d0:b0:9f:c3:40:64:fb:d7:d2:76:31:04:9b:24:28: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F4:F4:76:C1:D7:6D:F8:C5:17:2C:9D:E7:E2:B7:33:FD:24:AD:93 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9c674793-2377-4f72-bcf8-2ff0d70f9566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.96.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:4b:3a:c0:d8:0b:45:0a:b6:aa:7c:e6:84:e6:17:e6:25:ca: 0f:25:a6:13:7d:34:2d:1a:cb:6c:de:ed:6e:75:d0:6a:6c:33: 83:1c:00:0e:ae:49:8e:38:c8:36:7b:c9:6f:78:20:9a:9d:4d: e5:83:ec:f8:74:3b:42:60:04:89:f1:d2:5c:c6:03:28:52:d1: 18:95:cc:73:6f:3f:3c:3d:f0:51:2e:6c:07:a9:b9:48:56:a2: d0:37:b1:91:23:06:57:39:2f:bf:4f:eb:60:25:5b:03:8d:1a: 05:81:17:0c:9b:37:81:c2:bb:08:ff:ed:49:1c:87:ac:8f:e2: bc:03:14:ff:89:c5:d1:e9:6f:33:ec:fa:4a:e4:9f:12:04:d5: 09:6a:47:75:79:57:92:77:dd:e1:a5:9c:0f:0c:c6:98:4a:f9: 92:44:87:ca:ed:d7:44:ec:6a:26:4a:7a:0c:f6:1d:b2:4f:c2: 87:2a:ee:38:4a:5d:6c:65:ec:9c:50:cc:7b:04:8b:eb:dc:25: 8c:b3:3d:fc:d5:53:08:c9:98:40:b7:9e:70:94:42:dd:bf:0b: ae:06:a3:97:f3:b0:8c:ca:61:f0:fd:47:bc:a8:24:eb:69:3d: 21:2a:10:3f:d6:ad:55:a8:78:d2:96:01:f6:ab:41:9a:14:3c: ac:9e:e6:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZVGAinpXJblTElmVjgi9guz4QwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzOTA1WhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Njk4NTYxYWEzYmIzMjlmNjVlYzBkNjllMjI2MWQ2OWQ5 ZmExNmU4MDk5MTJmMjI1NjJiNTZmNmQ3MDY3NmEyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuH9GM806DlHnNMwivxl7jhQbzNQtZNcPQnDcNtn6220dv YFQqOe98GkzXH2icl0fh/BfVGe1scbQSOC4ledCY5L7WS6ISyqZVNuit3T5pS/vj tjes1BXuqcLDPopMu2YUU/0UQyiuc5SVjSMn7IGFGYUIN4q13NQfUVitHlJJ6VIj wRObz2tbtsf6JqVdBzHCQ50Ts/dkNeC5jluJTFCdhzVmuau2JyTIhnFkDzj8ovFy r0yPmJzlfVFK3jpzV83XkVZkInPIm5N5MT2RjDCYfjoXT97XgAWdKmdte2fMQvOr BPl2J7mjz9cTHrD0WNCwn8NAZPvX0nYxBJskKKTjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuvT0dsHXbfjFFyyd5+K3M/0krZMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljNjc0NzkzLTIzNzctNGY3Mi1iY2Y4LTJmZjBkNzBmOTU2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYGAwDQYJKoZIhvcNAQELBQADggEBAF5LOsDYC0UKtqp85oTmF+Ylyg8l phN9NC0ay2ze7W510GpsM4McAA6uSY44yDZ7yW94IJqdTeWD7Ph0O0JgBInx0lzG AyhS0RiVzHNvPzw98FEubAepuUhWotA3sZEjBlc5L79P62AlWwONGgWBFwybN4HC uwj/7Ukch6yP4rwDFP+JxdHpbzPs+krknxIE1QlqR3V5V5J33eGlnA8MxphK+ZJE h8rt10TsaiZKegz2HbJPwocq7jhKXWxl7JxQzHsEi+vcJYyzPfzVUwjJmEC3nnCU Qt2/C64Go5fzsIzKYfD9R7yoJOtpPSEqED/WrVWoeNKWAfarQZoUPKye5ro= -----END CERTIFICATE-----Generated at Sat Jun 14 07:07:51 2025 by rpki-client